CVE-2020-19678

The CVE-2020-19678 entry describes a Directory Traversal vulnerability in pfSense v2.1.3 and pfSense Suricata v1.4.6 pkg v1.0.1. The root cause is improper handling of the file parameter in suricata/suricata_logs_browser.php, allowing a remote attacker to read sensitive files. Applicable impact i...

CVE-2014-4694

CVE-2014-4694 refers to multiple XSS vulnerabilities in the pfSense Suricata package, specifically in suricata_select_alias.php. The issue affects Suricata before 1.0.6 for pfSense up through version 2.1.4. The root cause is insufficient input sanitization on unspecified variables, enabling remot...

CVE-2014-4696

CVE-2014-4696 describes multiple open redirect vulnerabilities in the Suricata package for pfSense, affected versions up to 1.0.6 (pfSense through 2.1.4). The issue allows remote attackers to redirect users to arbitrary sites via two parameters: referer in suricata_rules_flowbits.php and returl i...